Cloud Deployment on Azure
Introduction
This guide outlines an overview of how to deploy and manage Konekti in an Azure environment. It covers Konekti's architecture, necessary Azure components, security best practices, and automated deployment instructions. For a step-by-step deployment guide, contact contact the Konekti support team.
Architecture Overview
Konekti consists of three core components:
- Front-end: Angular-based user interface.
- Back-end: API handling business logic.
- PostgreSQL Database: Persistent data storage.
In addition, Konekti relies on two cloud-based services:
- License Management: Validates user licenses during login. No sensitive data is transmitted.
- Application Insights: Centralized logging and monitoring for performance metrics, anomaly detection, and exception tracking.
Azure Resources
Konekti is deployed using Azure Container Apps, offering:
- Scalability: Automatically adjusts resources based on demand.
- Serverless Efficiency: Scales to zero when idle to reduce costs (with a minor startup delay).
Required Azure Components
- Two Azure Container Apps:
- One for the front-end
- One for the back-end
- Azure Flexible Server for PostgreSQL:
- Managed database with built-in backup, scaling, and retention features.
Security Recommendations
Konekti runs in a private cloud setup, enabling complete control over security. The following practices are recommended:
PostgreSQL Database
- Block public access.
- Permit connections only from the Konekti back-end and authorized apps.
Back-end Container
- Do not expose publicly.
- Place behind a firewall or VPN.
- Restrict access to authenticated users via secure channels.
Adhering to these practices reduces attack surfaces and secures sensitive data.
Automated Deployment
Konekti supports automated Azure deployments using ARM templates. These templates streamline provisioning and configuration. Contact the Konekti team for access.
If you opt for manual deployment, refer to the step-by-step instructions in the local installation guide.